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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the appUcation: 
Listing of Claims: 

1 . (Currently Amended) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of q:Y^ + /3X^ +1 = 0, comprising: 

an input means for receiving two different prime numbers (a, b) specifying degree of 
complexity of a curve and size (n) of an encryption key to be used; 

a Stickelberger element computing device for computing a Stickelberger element (co) 
in an ab cyclotomic, based on the prime number (a) and the prime number (b); 

a Jacobian addition candidate value computing device for computing Jacobian 
addition candidate value j corresponding to the two different prime numbers a and b, and a 
prime number p corresponding to the Jacobian addition candidate value j, based on the prime 
number (a), the prime number (b), the size (n) of an encryption key, and the Stickelberger 
element (cd);. 

an order candidate value computing device for computing a class H consisting of a 
plurality of candidate values for order of a Jacobian group of an algebraic curve specified by 
the prime number a and the prime number b, based on the prime number a, the prime number 
b, and the Jacobian addition candidate value j; 

a security judging device for searching for a candidate value h meeting a security 
condition such as almost prime number characteristic fi-om the class H, according to the class 
H; 

a parameter deciding device for computing a parameter of an algebraic curve whose 
order of the Jacobian group is in accord with the candidate value h, of the algebraic curves 
specified by the prime number a, the prime number b, and the prime number p, based on the 
prime number a, the prime number b, the prime number p, and the candidate value h; and 
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an output device for supplying the parameter of the algebraic curve computed by said 
parameter deciding device to an algebraic curve crvptoera ph public k ey svstem. . 

2. (Previously Presented) A secure parameter generating device in an algebraic curve 
cryptography having the definition expression of oY^ + jSX^ +1 = 0 as claimed in Claim 1, 
further comprising: 

an a-storing means, a b-storing means, and an n-storing means for respectively storing 
the prime number a, the prime number b, and the size n of the encryption key received by said 
input means; 

a co-storing means for storing a Stickelberger element co computed by said 
Stickelberger element computing device; 

a p-storing means and a i-storing means for respectively storing the prime number p 
and the Jacobian addition candidate value j computed by said Jacobian addition candidate 
value computing device; 

an H-storing means for storing the class H computed by said order candidate value 
computing device; and 

an h-storing means for storing the candidate value h found by said security judging 

device. 

3. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1, further comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t'^} (v^here, t runs on a typical series of 
irreducible residue class with ab used as a divisor, X indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion X'[X] of the rational number 
X, 6t indicates Galois mapping ^ -x^Mn the ab cyclotomic (C, is the primitive ab root of 1)), 
based on the prime number a and the prime number b. 
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4. (Previously Presented) A secure parameter generating device in an 
algebraic curve cryptography having the definition expression of aY^ + ^X^ +1 
= 0 as claimed in Claim 1, further comprising: 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime nmnber b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation j = 

5. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1, further comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation co = Et [<t/a> + <t/b>] 6 _{-t"^} (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [X\ indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion X-[X] of the rational number 
X, 6t indicates Galois mapping ^ -x;' in the ab cyclotomic (C, is the primitive ab root of 1)), 
based on the prime number a and the prime number b; and 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation] = y"^. 

6. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of oY^ + /SX^ +1 = 0 as claimed in Claim 
1, further comprising: 
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said order candidate value computing device for computing a candidate value hu for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormiqQ (1+ (-Cf}) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 

H={hi,h2v ?h2ab}- 

7. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1 , further comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t'^ } (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [X] indicates the maximimi integer not 
exceeding a rational number X, <X> indicates a fractional portion X-[X] of the rational number 
X, 6t indicates Galois mapping ^ -> in the ab cyclotomic (i; is the primitive ab root of 1)), 
based on the prime number a and the prime number b; and 

said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormKjQ (1+ {<fD (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when C, is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, H={hi,h2,... ,h2ab} 

8. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of oY^ + /3X^ +1 - 0 as claimed in Claim 
1, further comprising: 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
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2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate yalue j by use of the equation j = y^; and 

said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormjciQ (1+ (- Q*" j) (where Norm_{K|Q} is a norm mapping in the 
ab cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when ^ is the 
primitive ab root of 1 , based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, H={hi,h2,." Miah} 

9. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1 , further comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation (o = St [<t/a> + <t/b>] 6 _{-t"' } (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [X] indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion X-[X] of the rational number 
X, 6t indicates Galois mapping C^-^i;^m the ab cyclotomic (^ is the primitive ab root of 1)), 
based on the prime number a and the prime number b; 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation j = y"^; and 

said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormKiQ (1+ (-Q*" j) (where Norm_{K|Q} is a norm mapping in the ab 
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cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when ^ is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}. 

10. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of oY^ + jSX^ +1 = 0 as claimed in Claim 
1, further comprising: 

said parameter deciding device for requiring the primitive a root (^a and the primitive b 
root i^b of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation + i;b"' + 1 = 0, as for each integer 1 

from 1 to a inclusively and each integer m from 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, and C.^"^ as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

1 1 , (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1, further comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
o by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t"* } (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [k] indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion X- [k] of the rational 
number X, 6t indicates Galois mapping <; -> i;* in the ab cyclotomic (C, is the primitive ab root 
of 1)), based on the prime number a and the prime number b; and 

said parameter deciding device for requiring the primitive a root C^^ and the primitive b 
root <:;b of 1 with the prime number p used as the divisor, based on the prime number a, the 
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prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation C,^, + Q^"^ + 1=0, as for each integer 1 
fi-om 1 to a inclusively and each integer in firom 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, C,^^, and ^b"" as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

12. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1, further comprising: 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element O), and computing the Jacobian addition 
candidate value j by use of the equation j = y^; and 

said parameter deciding device for requiring the primitive a root and the primitive b 
root of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation Y^ + ^b"" + 1=0, as for each integer 1 
fi-om 1 to a inclusively and each integer m fi-om I to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, C,^, and ^b"^ as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

13. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of oY^ + jSX^ +1 = 0 as claimed in Claim 
1, fiirther comprising: 
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said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = Normic/q (1+ {-Cf j) (where Norm_{K|Q} , is a norm mapping in the 
ab cyclotomic K), as for each k that is an integer fi-om 1 to 2ab inclusively, when is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab};and 

said parameter deciding device for requiring the primitive a root C,^ and the primitive b 
root C,h of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation + (;b'" + 1=0, as for each integer 1 

fi-om 1 to a inclusively and each integer in from 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, and (^b"" as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

14, (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aV^ + +1 = 0 as claimed in Claim 
1, fiirther comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation co = Zt [<t/a> + <t/h>] 6 _{-t'^} (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [k] indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion of the rational number 
X, 6t indicates Galois mapping i; ^ i;' in the ab cyclotomic (C is the primitive ab root of 1)), 
based on the prime number a and the prime number b; 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
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2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element (o, and computing the Jacobian addition 
candidate value j by use of the equation j = y^; and 

said parameter deciding device for requiring the primitive a root i^a and the primitive b 
root of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation + C,^"^ + 1=0, as for each integer 1 

from 1 to a inclusively and each integer in from 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, C,a\ and as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

15. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1 , ftxrther comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t"*} (where, t mns on a typical series of 
irreducible residue class with ab used as a divisor, [X] indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion f the rational number 
A., 6t indicates Galois mapping C,~>C in the ab cyclotomic (^ is the primitive ab root of 1)), 
based on the prime number a and the prime number b; 

said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = Normic/q (1+ (-Cf }) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when C, is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 
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said parameter deciding device for requiring the primitive a root and the primitive b 
root of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation + C^h^ + 1=0, as for each integer 1 

from 1 to a inclusively and each integer in fi-om 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, QJ, and C^yT as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

16. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1, further comprising: 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation j = y"^; 

said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation h^ = NormK/q (1+ (-^;)'' j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1 , based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 

said parameter deciding device for requiring the primitive a root C,a^ and the primitive b 
root of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
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over an algebraic curve defined by the equation + ^b"" + 1=0, as for each integer 1 

from 1 to a inclusively and each integer m from 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, C,^, and as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

17. (Previously Presented) A secure parameter generating device in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
1, fiirther comprising: 

said Stickelberger element computing device for computing the Stickelberger element 
CO by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t'^} (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [X] indicates the maximum integer not 
exceeding a rational number X, <X> indicates a fractional portion X-[X] of the rational number 
X, 6t indicates Galois mapping -> ^ in the ab cyclotomic is the primitive ab root of 1)), 
based on the prime number a and the prime number b; 

said Jacobian addition candidate value computing device for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation j = y""; 

said order candidate value computing device for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation h^ = Normic/q (1+ «f j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 
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said parameter deciding device for requiring the primitive a root and the primitive b 
root of 1 with the prime number p used as the divisor, based on the prime number a, the 
prime number b, the prime number p, and the candidate value h, generating a random point G 
over an algebraic curve defined by the equation + ^b"" + 1=0, as for each integer 1 

fi-om 1 to a inclusively and each integer m from 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, C,^^, and ^b"" as the 
parameter of an algebraic curve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 

18. (Currently Amended) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of oiY^ + ^X^ +1=0, comprising the 
steps of: 

a Stickelberger element computing procedure for computing a Stickelberger element 
CO in an ab cyclotomic, respectively based on two different prime numbers a and b specifying 
degree of complexity of curve; 

a Jacobian addition candidate value computing procedure for computing Jacobian 
addition candidate value j corresponding to the two different prime numbers a and b, and a 
prime number p corresponding to the Jacobian addition candidate value j, respectively based 
on the prime number a, the prime nimiber b, the size n of an encryption key, and the 
Stickelberger element co; 

an order candidate value computing procedure for computing a class H consisting of a 
plurality of candidate values for order of a Jacobian group of an algebraic curve specified by 
the prime number a and the prime number b, respectively based on the prime number a, the 
prime number b, and the Jacobian addition candidate value j; 

a security judging procedure for searching for a candidate value h meeting a security 
condition such as almost prime number characteristic fi-om the class H, according to the class 
H; and 
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a parameter deciding procedure for computing a parameter of an algebraic curve 
whose order of the Jacobian group is in accord with the candidate value h, of the algebraic 
curves specified by the prime number a, the prime number b, and the prime number p, 
respectively based on the prime number a, the prime number b the prime number p, and the 
candidate value h : and 

supplying said paramete r to an algebraic curve crvptograph public kev system. . 

19. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + iSX^ +1 = 0 as claimed in Claim 
18, further comprising: 

a procedure for storing a Stickelberger element co computed by said Stickelberger 
element computing procedure into said ©-storing means; 

a procedure for respectively storing the prime number p and the Jacobian addition 
candidate value j computed by said Jacobian addition candidate value computing procedure 
into said p-storing means and j-storing means; 

a procedure for storing the class H computed by said order candidate value computing 
procedure into said H-storing means; and 

a procedure for storing the candidate value h found by said security judging procedure 
into said h- storing means. 

20. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + ^X^ +1 == 0 as claimed in Claim 
18, fiirther comprising: 

said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation co = Et [<t/a> + <t/b>] 6 _{-f (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [X] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fi-actional portion X'[X] of the 
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rational number A,, 6t indicates Galois mapping C ^ C in the ab cyclotomic {C, is the 
primitive ab root of 1)), based on the prime nimiber a and the prime number b. 

2 1 . (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY* + |8X'' +1 = 0 as claimed in Claim 
18, further comprising: 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer y generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element w, and computing the Jacobian addition 
candidate value j by use of the equation j = y"- 

22. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY" + /SX*" +1 = 0 as claimed in Claim 
1 8, fiirther comprising: 

said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation o) - Zt [<t/a> + <t/b>] 6 _{-t-'} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [k] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fi-actional portion of the 
rational number X, 6, indicates Galois mapping C C in the ab cyclotomic (C is the 
primitive ab root of 1)), based on the prime number a and the prime number b; and 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer y generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element o, and computing the Jacobian addition 
candidate value j by use of the equation j = y". 
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23. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of oY^ + jSX^ +1 = 0 as claimed in Claim 
18, further comprising: 

said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormK/q (1+ {-Cf j) (where Norm {K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer fi-om 1 to 2ab inclusively, when ^ is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2v" ,h2ab}. 

24. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
18, fiirther comprising: 

said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t'^} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [k] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fi-actional portion X'[X] of the 
rational number X, 6t indicates Galois mapping Q-^C^^in the ab cyclotomic (^ is the primitive 
ab root of 1)), based on the prime number a and the prime number b; and 

said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormK/q (1+ «f j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer fi:*om 1 to 2ab inclusively, when ^ is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 

H={hi,h2v- jh2ab}. 
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25. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + j8X^ +1 = 0 as claimed in Claim 
18, further comprising: 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer 1 generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime niunber a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation] = y"; and 

said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation h^ = Normjc/Q (1+ {-Cf j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1, based on the prime nxmiber a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2v ,h2ab}. 

26. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + /SX^ +1 = 0 as claimed in Claim 
18, further comprising: 

said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-f ^} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [X] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fractional portion X-[X] of the 
rational number X, 6t indicates Galois mapping ^ -> ^Mn the ab cyclotomic (i; is the primitive 
ab root of 1)), based on the prime number a and the prime number b; 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer y generating a prime ideal of a cyclotomic K generated 
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by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element 0), and computing the Jacobian addition 
candidate value j by use of the equation j = y**; and 

said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk =NormKyQ (1+ «f j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1 , based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}. 



27. (Previously Presented) A seciu-e parameter generating method in an algebraic 
curve cryptography having the definition expression of aY" + ^x" +1 = 0 as claimed in Claim 
18, further comprising: 



said parameter deciding procedure for requiring the primitive a root C,^ and the 
primitive b root Cb of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C,J, + C,b" X'' + 1=0, as for 
each integer 1 from 1 to a inclusively and each integer in from 1 to b inclusively, computing(; 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, C,J, 
and Cb"" as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

28. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + /3X^ +1 = 0 as claimed in Claim 
18, further comprising: 
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said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-t"^} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [X] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fractional portion X-[X] of the 
rational number X, Ot indicates Galois mapping Q-^C in the ab cyclotomic (C, is the 
primitive ab root of 1)), based on the prime number a and the prime number b; and 

said parameter deciding procedure for requiring the primitive a root and the 
primitive b root i^b of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C,J, + ^b"" + 1=0, as for 
each integer 1 from 1 to a inclusively and each integer in from 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, 
and ^b"" as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

29. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
18, further comprising: 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer y generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation j = y*"; and 

said parameter deciding procedure for requiring the primitive a root and the 
primitive b root ^b of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation (^a^ + C^h^ + 1=0, as for 
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each integer 1 from 1 to a inclusively and each integer in from 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, 
and ^b"" as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

30. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + jSX^ +1 = 0 as claimed in Claim 
18, fiarther comprising: 

said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormK/q (1+ (-Q^ j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1 , based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 

said parameter deciding procedure for requiring the primitive a root (^a and the 
primitive b root of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C,J, + ^b"" + 1=0, as for 
each integer 1 from 1 to a inclusively and each integer in from 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, C,J, 
and ^^b"" as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

31. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of oY^ + jSX^ +1 = 0 as claimed in Claim 
18, further comprising: 
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said Stickelberger element computing procedure for computing the Stickelberger 
element © by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-f^} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [X] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fractional portion X'[X] of the 
rational number X, 6t indicates Galois mapping (;^C,^m the ab cyclotomic {C, is the primitive 
ab root of 1)), based on the prime number a and the prime number b; 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer y generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime number a, the prime nimiber b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation j = y"^; and 

said parameter deciding procedure for requiring the primitive a root (^a and the 
primitive b root of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C,si\ + C^^T + 1=0, as for 
each integer 1 from 1 to a inclusively and each integer m from 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, 
and <;b'" as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

32. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + +1 = 0 as claimed in Claim 
18, fixrther comprising: 

said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation co = Zt [<t/a> + <t/b>] 6 _{-f^} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [X] indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fractional portion X-[X] of the 
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rational niimber X, 6t indicates Galois mapping ^ i;Mn the ab cyclotomic (C, is the primitive 
ab root of 1)), based on the prime number a and the prime number b; 

said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hi, = NormK/q j) (where Norm_{K|Q} is a norm mapping in the ab 

cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 

said parameter deciding procedure for requiring the primitive a root (^a and the 
primitive b root of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C,^\ + C.h'^ + 1=0, as for 
each integer 1 from 1 to a inclusively and each integer in from 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, 
and as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

33. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY^ + /3X^ +1 = 0 as claimed in Claim 
18, further comprising: 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer y generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
length 2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element co, and computing the Jacobian addition 
candidate value j by use of the equation] = y"^; 
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said order candidate value computing procedure for computing a candidate value hk 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = Normn/q (1+ (-^)'' j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when ^ is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 

said parameter deciding procedure for requiring the primitive a root (^a and the 
primitive b root of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number Pi and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C,^, + ^b"" ^ + 1=0> as for 
each integer 1 fi-om 1 to a inclusively and each integer in fi-om 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, Cj , 
and (;b'" as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime number b if the result is equal to an identity element in the Jacobian group. 

34. (Previously Presented) A secure parameter generating method in an algebraic 
curve cryptography having the definition expression of aY" + ^X" +1 = 0 as claimed in Claim 
18, fiirther comprising: 

said Stickelberger element computing procedure for computing the Stickelberger 
element co by use of the equation co = Zt [<t/a> + <t^>] 6 _{-f'} (where, t runs on a typical 
series of irreducible residue class with ab used as a divisor, [X\ indicates the maximum 
integer not exceeding a rational number X, <X> indicates a fi-actional portion X-[X] of the 
rational number X, 6, indicates Galois mapping ^ C in the ab cyclotomic (C is the primitive 
ab root of 1)), based on the prime number a and the prime number b; 

said Jacobian addition candidate value computing procedure for generating a at 
random, which is an algebraic integer 1 generating a prime ideal of a cyclotomic K generated 
by the primitive ab root of 1 and whose absolute norm becomes the prime number p of bit 
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length 2ii/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element o, and computing the Jacobian addition 
candidate value j by use of the equation j = y^ ; 

said order candidate value computing procedure for computing a candidate value h^ 
for the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NormK/q (1+ (-Q^ j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer from 1 to 2ab inclusively, when ^ is the 
primitive ab root of 1 , based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}; and 

said parameter deciding procedure for requiring the primitive a root i^a and the 
primitive b root C,h of 1 with the prime number p used as the divisor, based on the prime 
number a, the prime number b, the prime number p, and the candidate value h, generating a 
random point G over an algebraic curve defined by the equation C^^, + ^ + 1=0. as for 
each integer 1 from 1 to a inclusively and each integer in from 1 to b inclusively, computing 
the h-fold of an element in the Jacobian group indicated by the point G, and supplying p, C,^\ 
and C,h^ as the parameter of an algebraic curve whose order of the Jacobian group is in accord 
with the candidate value h, of the algebraic curves specified by the prime number a and the 
prime niunber b if the result is equal to an identity element in the Jacobian group. 

35. (Currently Amended) A computer readable memory storing a program for 
generating a secure parameter in an algebraic curve cryptography having the definition 
expression of oiY^ + jSX^ +1=0, which, when executi ng on a computer c auses the c omputer 
to carry out the sten s comprising: to run tho program on a computer, 

th e program comprising the st e ps of: 

a Stickelberger element computing procedure for computing a Stickelberger element 
00 in an ab cyclotomic, respectively based on two different prime numbers a and b specifying 
degree of complexity of curve; 
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a Jacobian addition candidate value computing procedure for computing Jacobian 
addition candidate value j corresponding to the two different prime numbers a and b, and a 
prime number p corresponding to the Jacobian addition candidate value j, respectively based 
on the prime number a, the prime number b, the size n of an encryption key, and the 
Stickelberger element co; 

an order candidate value computing procedure for computing a class H consisting of a 
plurality of candidate values for order of a Jacobian group of an algebraic curve specified by 
the prime number a and the prime number b, respectively based on the prime number a, the 
prime number b, and the Jacobian addition candidate value j; 

a security judging procedure for searching for a candidate value h meeting a security 
condition such as almost prime number characteristic from the class H, according to the class 
H; and 

a parameter deciding procedure for computing a parameter of an algebraic curve 
whose order of the Jacobian group is in accord with the candidate value h, of the algebraic 
curves specified by the prime number a, the prime number b, and the prime number p, 
respectively based on the prime number a, the prime number b, the prime number p, and the 
candidate value h. 

36. (Currently Amended) A computer readable memory storing a program for 
generating a secure parameter in an algebraic curve cryptography having the definition 
expression of oiY^ + jSX^ +1 = 0. which, w hen exe cuting on a com puter causes the computer 
to carry out the step s comprising: 

the program comprising the stops of: 

a Stickelberger element computing procedure for computing the Stickelberger element 
o by use of the equation co = St [<t/a> + <t^>] 6 _{-r^ } (where, t runs on a typical series of 
irreducible residue class with ab used as a divisor, [X] indicates the maximum integer not 
exceeding a rational number <X> indicates a fractional portion X'[X] of the rational number 
X, 6t indicates Galois mapping C,^C^^ the ab cyclotomic (^ is the primitive ab root of 1)), 
based on the prime number a and the prime number b. 
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37. (Currently Amended) A computer readable memory storing a program for 
generating a secure parameter in an algebraic curve cryptography having the definition 
expression of aY^ + jSX^ +1 = 0. which, when executing on a computer causes t he computer 
to carrv out the steps comprising: 

th e program compriGing the steps of: 

a Jacobian addition candidate value computing procedure for generating a at random, 
which is an algebraic integer y generating a prime ideal of a cyclotomic K generated by the 
primitive ab root of 1 and whose absolute norm becomes the prime number p of bit length 
2n/(a-l)(b-l) or so, based on the prime number a, the prime number b, the size n of the 
encryption key, and the Stickelberger element cd, and computing the Jacobian addition 
candidate value j by use of the equation j = y^; 

38. (Currently Amended) A computer readable memory storing a program for 
generating a secure parameter in an algebraic curve cryptography having the definition 
expression of aY^ + jSX^ +1 = 0. which, when executing on a computer causes the computer 
to carrv out the steps comprising: 

the program comprising the steps of: 

an order candidate value computing procedure for computing a candidate value hk for 
the order of the Jacobian group of an algebraic curve specified by the parameters a and b, 
using the equation hk = NomiK/q (1+ (-Q^ j) (where Norm_{K|Q} is a norm mapping in the ab 
cyclotomic K), as for each k that is an integer fi-om 1 to 2ab inclusively, when is the 
primitive ab root of 1, based on the prime number a, the prime number b, and the Jacobian 
addition candidate value j, and computing the class of the candidate values, 
H={hi,h2,... ,h2ab}. 

39. (Currently Amended) A computer readable memory storing a program for 
generating a secure parameter in an algebraic curve cryptography having the definition 
expression of oY^ + jSX^ +1 = 0. which, when executing on a c omputer causes the computer 
to carry out the steps comprising: 
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the program comprising the stops of: 

a parameter deciding procedure for requiring he primitive a root C^^ and the primitive b root 
of 1 with the prime number p used as the divisor, based on the prime number a, the prime 
number b, the prime number p, and the candidate value h, generating a random point G over 
an algebraic curve defined by the equation C,a\ + i^b"" X*' + 1=0, as for each integer 1 fi-om 
1 to a inclusively and each integer in fi-om 1 to b inclusively, computing the h-fold of an 
element in the Jacobian group indicated by the point G, and supplying p, C,J, and ^b"" as the 
parameter of an algebraic cxirve whose order of the Jacobian group is in accord with the 
candidate value h, of the algebraic curves specified by the prime number a and the prime 
number b if the result is equal to an identity element in the Jacobian group. 
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